user_database.py

import sys
import os
import hashlib
import random
import time
from datetime import datetime


print "importing sha3"
import sha3

from flask.ext.sqlalchemy import SQLAlchemy



sys.path.insert(0, os.path.dirname(os.path.abspath( __file__ )))
from apper import *


user_db = SQLAlchemy(app)

#https://github.com/mrjoes/flask-admin/blob/master/examples/auth/app.py
class User(user_db.Model):
    id         = user_db.Column(user_db.Integer, primary_key=True)
    first_name = user_db.Column(user_db.String(100))
    last_name  = user_db.Column(user_db.String(100))
    login      = user_db.Column(user_db.String( 80), unique=True)
    email      = user_db.Column(user_db.String(120))
    password   = user_db.Column(user_db.String(400))
    salt       = user_db.Column(user_db.String(400))

    # Flask-Login integration
    def is_authenticated(self):
        return True

    def is_active(self):
        return True

    def is_anonymous(self):
        return False

    def get_id(self):
        return self.id

    # Required for administrative interface
    def __unicode__(self):
        return self.login

    def __repr__(self):
        return "<User id %s first_name %s last_name %s login %s email %s password %s salt %s>" % \
        tuple([str(x) for x in [ self.id, self.first_name, self.last_name, self.login, self.email, self.password, self.salt]])




def check_user_exists(username):
    return user_db.session.query(User).filter_by(login=username).count() > 0



def get_user(username):
    return user_db.session.query(User).filter_by(login=username).first()



def get_users():
    users = [ x.login for x in User.query.order_by(User.login) ]
    users.sort()
    return users



def add_user(username, password, salt):
    if check_user_exists(username):
        raise KeyError

    user = User()

    user.login    = username
    user.password = password
    user.salt     = salt

    user_db.session.add(user)
    user_db.session.commit()



def get_salt(username):
    return get_user(username).salt



def verify_user_credentials(username, password, noonce):
    user = get_user( username )
    pwd  = user.password
    cry  = generate_password_hash(noonce+pwd)
    print "verify_user_credentials: user %s pwd %s cry %s password %s" % ( user, pwd, cry, password )

    if cry == password:
        return True

    else:
        return False



def del_user(username):
    user = get_user(username)
    user_db.session.delete(user)
    user_db.session.commit()



def generate_password_hash(seq):
    return sha3.sha3_512(  seq.encode('utf-8') ).hexdigest()
    #return hashlib.sha512( seq ).hexdigest()



def gen_noonce():
    return generate_password_hash( str(random.randint(0, sys.maxint)) + str(time.time()) + str(datetime.now().microsecond) )